Quick win: Add your company domain to M365's custom banned password list. Prevent users from using variations of your company name as passwords.

#PasswordPolicy #CustomBannedList #M365
https://365securityassessment.com